$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: pdoZ+zZDa6DbaDYZdZNCahCG++KHVkNmr9f3Pm08pic= Subject key identifier: 8D:C6:ED:C8:7D:3A:49:C8:AF:EC:8F:E6:F6:95:86:C2:6E:93:22:79 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 20E42868244F5CC677E69D9CCFE2B3FA8D447817 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: 84 Signing time: Fri 24 Jul 2026 14:21:25 +0000 Manifest this update: Fri 24 Jul 2026 14:16:25 +0000 Manifest next update: Sat 25 Jul 2026 18:00:25 +0000 Files and hashes: 1: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: 71fR+uDBhSn5WM7OI0cNQUEdQD6KHn5tH/CT6K99HBo=) 2: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) 3: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 18:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e4:28:68:24:4f:5c:c6:77:e6:9d:9c:cf:e2:b3:fa:8d:44:78:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Jul 24 14:16:25 2026 GMT Not After : Jul 25 18:00:25 2026 GMT Subject: CN=8DC6EDC87D3A49C8AFEC8FE6F69586C26E932279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:12:ad:1c:0a:17:87:49:93:f7:65:9d:a5: fc:0b:bc:63:b6:8f:7c:79:aa:d2:6a:f2:f6:1e:bb: 0c:d1:5c:c7:59:ae:d3:14:57:7a:5a:1c:63:cc:19: 04:fd:6d:b2:04:14:d2:b2:49:1d:d3:06:36:d0:a1: 18:12:60:11:31:9e:50:56:eb:d0:21:89:cf:79:0a: f7:20:53:15:eb:e8:df:b2:be:6b:85:7e:aa:63:4d: 8e:fb:4e:8a:bb:fc:63:d1:b6:20:59:fd:05:da:17: cc:1d:7b:3a:78:92:cd:3c:d6:7a:d0:60:14:cf:dd: 55:58:61:38:83:53:08:62:42:13:85:c4:87:05:48: ab:d6:a2:f8:be:1e:ca:e6:ed:b6:94:c6:ce:b3:c9: b7:40:28:be:ac:12:3b:24:9c:da:97:21:e0:33:c2: 6a:63:07:7c:af:96:c2:7b:dc:51:05:fe:74:45:7b: e7:a5:09:55:ea:86:a1:9a:66:7b:00:b8:ee:e1:72: 82:4e:5d:85:eb:d8:23:9e:20:96:0c:e6:1e:48:ac: 71:a9:12:27:11:38:a0:48:38:48:e8:ef:20:2b:29: 1a:cf:0f:80:47:30:32:c0:89:05:26:e6:2e:63:55: 38:e1:c4:ba:51:29:d2:f9:0e:f9:e4:aa:5a:9f:e0: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C6:ED:C8:7D:3A:49:C8:AF:EC:8F:E6:F6:95:86:C2:6E:93:22:79 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2e:ee:bb:6f:45:48:57:87:06:f7:50:96:fa:73:00:f2:42: ce:15:83:4c:3a:86:6b:53:72:81:d0:66:f8:89:a5:e5:c8:18: f1:25:f7:ec:59:71:58:00:3c:a9:39:51:36:c4:38:b1:fb:32: c8:c5:71:c3:c0:e6:15:7a:82:9b:9f:67:e6:71:c6:15:11:e0: a6:14:54:78:59:1d:80:da:8d:ff:7a:7d:c9:a9:30:26:d7:37: e5:85:be:35:da:28:80:dc:5a:75:6b:c2:f3:09:40:a9:95:90: 67:5e:4a:d0:56:7d:63:ec:5f:1f:18:92:96:75:f3:5b:f7:fa: 14:b2:de:c5:72:ff:e8:a0:2d:f5:00:c7:2d:d3:24:54:22:6a: d7:61:56:73:87:d0:74:a8:4d:f4:e6:08:57:f6:c4:38:dc:e5: f3:50:a5:03:46:48:e1:57:55:77:d7:b7:e2:52:69:d9:99:de: c1:56:75:30:92:85:f7:eb:93:ce:3c:1b:a5:e3:60:fc:bd:1f: 61:a5:05:d7:44:d4:bf:de:c2:dc:40:6e:8b:71:35:ef:b0:27: 2e:f2:0c:b2:ec:c2:5d:1e:a3:25:e5:0d:04:ee:44:46:19:e9: 9a:a3:04:2c:eb:b5:a1:46:11:dd:01:4d:11:94:75:e2:8e:94: 7b:f4:46:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIOQoaCRPXMZ35p2cz+Kz+o1EeBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA3MjQxNDE2MjVaFw0yNjA3MjUxODAwMjVaMDMxMTAvBgNV BAMTKDhEQzZFREM4N0QzQTQ5QzhBRkVDOEZFNkY2OTU4NkMyNkU5MzIyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHxKtHAoXh0mT92WdpfwLvGO2 j3x5qtJq8vYeuwzRXMdZrtMUV3paHGPMGQT9bbIEFNKySR3TBjbQoRgSYBExnlBW 69Ahic95CvcgUxXr6N+yvmuFfqpjTY77Toq7/GPRtiBZ/QXaF8wdezp4ks081nrQ YBTP3VVYYTiDUwhiQhOFxIcFSKvWovi+Hsrm7baUxs6zybdAKL6sEjsknNqXIeAz wmpjB3yvlsJ73FEF/nRFe+elCVXqhqGaZnsAuO7hcoJOXYXr2COeIJYM5h5IrHGp EicROKBIOEjo7yArKRrPD4BHMDLAiQUm5i5jVTjhxLpRKdL5Dvnkqlqf4NcrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjcbtyH06Sciv7I/m9pWGwm6TInkwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy7uu29FSFeH BvdQlvpzAPJCzhWDTDqGa1NygdBm+Iml5cgY8SX37FlxWAA8qTlRNsQ4sfsyyMVx w8DmFXqCm59n5nHGFRHgphRUeFkdgNqN/3p9yakwJtc35YW+NdoogNxadWvC8wlA qZWQZ15K0FZ9Y+xfHxiSlnXzW/f6FLLexXL/6KAt9QDHLdMkVCJq12FWc4fQdKhN 9OYIV/bEONzl81ClA0ZI4VdVd9e34lJp2ZnewVZ1MJKF9+uTzjwbpeNg/L0fYaUF 10TUv97C3EBui3E177AnLvIMsuzCXR6jJeUNBO5ERhnpmqMELOu1oUYR3QFNEZR1 4o6Ue/RGvg== -----END CERTIFICATE-----Generated at Fri Jul 24 22:15:03 2026 by rpki-client